Date: Tue, 18 Mar 2008 18:37:45 -0700
From: "James Connery" <james.j.connery@gmail.com.>
To: bugtraq@securityfocus.com
Subject: Question on CERT-FI and CPNI Joint Vulnerability Advisory on Archive Formats?
MIME-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
X-Virus-Scanned: antivirus-gw at tyumen.ru
Hello all,
I am a bit of a confused with recent CERT advisory on archive formats.
URL: https://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html
In the advisory it is clearly stated that e.g. Microsoft and Apple are
not vulnerable. However after downloading the tool from PROTOS and
trying to open some of the archives on my Windows box (WinXP, latest
patches and everything) - it in lack of a better word - melts down to
the point of becoming completely unusable. I then tried these with
Apple; and again - similar results.
So I'm bit of a confused here... Can someone confirm what I am
seeing=?
PROTOS is available from below URL to try out...
URL: http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/
Cheers,
James
